CVE-2019-9958

CSRF within the admin panel in Quadbase EspressReport ES (ERES) v7.0 update 7 allows remote attackers to escalate privileges, or create new admin accounts by crafting a malicious web page that issues specific requests, using a target admin's session to process their requests.

• CWE-352

• https://crawl3r.xyz/cve/cve-2019-9958/Exploit, Third Party Advisory, URL Repurposed
• https://crawl3r.xyz/cve/cve-2019-9958/Exploit, Third Party Advisory, URL Repurposed

Published

Jun 24, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-9949Western Digital My Cloud Cloud, Mirror Gen2, EX2 Ultra, EX21…
• CVE-2019-9950Western Digital My Cloud, My Cloud Mirror Gen2, My Cloud EX2…
• CVE-2019-9951Western Digital My Cloud, My Cloud Mirror Gen2, My Cloud EX2…
• CVE-2019-9955On Zyxel ATP200, ATP500, ATP800, USG20-VPN, USG20W-VPN, USG4…
• CVE-2019-9956In ImageMagick 7.0.8-35 Q16, there is a stack-based buffer o…
• CVE-2019-9957Stored XSS within Quadbase EspressReport ES (ERES) v7.0 upda…
• CVE-2019-9959The JPXStream::init function in Poppler 0.78.0 and earlier d…6.5
• CVE-2019-9960The downloadZip function in application/controllers/admin/ex…
• CVE-2019-9961A cross-site scripting (XSS) vulnerability in ressource view…
• CVE-2019-9962XnView MP 0.93.1 on Windows allows remote attackers to cause…
• CVE-2019-9963XnView MP 0.93.1 on Windows allows remote attackers to cause…
• CVE-2019-9964XnView MP 0.93.1 on Windows allows remote attackers to cause…